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LISTING OF THE CLAIMS: 



1 . (Currently Amended) A method for migrating from a source user authenticator having a 
source datastore[[,]] containing encrypted password data and other unencrypted data wherein th e 
data roproaonts - data - for - multiplo - u a or s- caoh - having an - idontifieatien - QTid - an -a ss o ciated password , 
to a target user authenticator having a target datastore , the method comprising: 

Read ing the s e l e ct e d unencrypted data from source datastore , wherein the source 
datastore contains encrypted password data and other unencrypted data, wherein the unencrypted 
data represents data for multiple users each having an identification and an associated password : 
Conver ting the unencrypted data to be compatible with target datastore; 
Populate Populating the target datastore with the converted data; 
Implement ing a servlet [[to]] that : 

Intercepts an identification from a user seeking access to information 
protected by the target user authenticator,-and 

Locates the corresponding identification in the target datastore a and 
Determines dotermino wheth e r th e that the target datastore does not 
include[[s]] a password associated with the identification; and 
If th e targ e t datastor e do e s not includ e a password associated with the id e ntification, 
implementing a password capture process ITtollthat: 

Intercepts a password from the user associated with the received 
identification, 
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Submits the received identification and received password to the source 
user authenticator, 

Monitors the source user authenticator for an approval response prior to 
populating the target datastore, and 

On r e ceipt of on approval respons e from th e source user authenticator, 
populat e Populates the target datastore with the received password associating the 
received password with the corresponding identification , upon receipt of an 
approval response from the source user authenticator . 

2. (Original) The method of claim 1 further comprising the action of: 

If, after determining whether the target datastore includes a password associated with the 
identification, the target datastore does include a password associated with the identification, 
then authenticate the identification and password using the target user authenticator. 

3 . (Original) The method of claim 1 , wherein the actions of receiving a password from a 
user further comprises: 

Receiving a password in a single submission from the user in conjunction with receiving 
the identification from the user. 
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4. (Original) The method of claim 1 , wherein the action of receiving a password from a 
user further comprises: 

Receiving a password in a submission from the user after the initial submission of the 
identification from the user. 

5. (Original) The method of claim 1, wherein the action of receiving a password from a 
user further comprises: 

Prompting for and receiving a password from the user after the initial submission of the 
identification from the user. 

6. (Original) The method of claim 1 , wherein the action of receiving a password from a 
user further comprises: 

Prompting for and receiving the identification and a password from the user after the 
initial submission of the identification from the user. 

7. (Original) The method of claim 6, wherein the action of prompting for and receiving 
the identification and a password from the user after the initial submission of the identification 
from the user occurs after determining that the target datastore does not include a password 
associated with the identification; and, 

wherein the action further comprises using the source user authenticator to prompt for and 
receive the identification and a password from the user after the initial submission of the 
identification from the user. 
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8. (Original) The method of claim 7, wherein while the source user authenticator is 
receiving the submitted password from the user, capturing the password provided by the user in 
response to the source authenticator prompting and using the captured password as the received 
password. 

9. (Original) The method of claim 7, wherein after receipt of an approval response from 
the source user authenticator, capturing the password provided by the user in response to the 
source authenticator prompting and using the captured password as the received password. 

10. (Withdrawn) The method of claim 1, wherein the target datastore is an LDAP compliant 
directory service. 

11. (Withdrawn) The method of claim 1, wherein the target datastore is a relational 
database. 

12. (Withdrawn) The method of claim 10, wherein the source datastore is a relational 
database. 

13. (Withdrawn) The method of claim 11, wherein the source datastore is a relational 
database. 

1 4. (Withdrawn) The method of claim 1 , wherein the user is a person. 
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1 5 . (Withdrawn) The method of claim 1 , wherein the user is a software object. 
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16. (Currently Amended) A method for populating password data [[to]] in a target datastore 
of a target user authenticator after migration from a source user authenticator having a source 
datastore, while also responding to user requests for information , the method comprising: 

migrating the source user datastore with the source user authenticator to the target 
datastore with the target user authenticator, wherein the target user datastore comprises user 
identification data, and wherein the target user authenticator is in communication with the source 
user authenticator; 

with an int e rceptor: 

interceptin g, by an interceptor, a request to the source user authenticator from a user 
seeking access to information protected by the target user authenticator, wherein interceptor 
prompts the user for an identification, receives the identification from the user, locates the 
corresponding identification in the target datastore, and determines whether the target datastore 
includes a password associated with the identification: and 

prompting the user for an id e ntification, 
receiving th e id e ntification from th o user, and 

locating the corresponding identification in th e target datastore and 
dotormining wheth e r the target datastor e includes a paooword associated with th e 
id e ntification; and 

searching the target datastore for the password associated with the identification, wherein 
upon the determination that there is no password in the target datastore associated with the 
identification: 
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if tho targot datastore does not includ e a password associated with th e id e ntification, th e n 
with a- password captur e proc e ss: 

allowing the original intercepted request to go through to the source user 
authenticator, 

using the source user authenticator to prompt for and receive the 
identification and a password from the user, 

capturing the password provided by the user in response to the source 
authenticator prompting and using the captured password as the received 
password, 

monitoring the source user authenticator for an approval response, [[and]] 
on receipt of an approval r e sponse from the sourc e us e r auth e nticator, 
populate populating the target datastore with the received password upon receipt 
by the target datastore of an approval response from the source user authenticator, 
and 

associating the received password with the corresponding identification. 

17. (Original) The method of claim 16, wherein after populating the target datastore, 
further comprising prompting for and receiving from the user the password associated with the 
identification. 
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18. (Original) The method of claim 17, wherein the action of prompting for and 
receiving from the user the password associated with the identification comprises prompting for 
and receiving from the user the identification and the password associated with the identification. 
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1 9. (Withdrawn) A method for checking for populated password data to a target datastore of 
a target user authenticator after migration from a source user authenticator having a source 
datastore, while also responding to user requests for information comprising: 

with an interceptor: 

intercepting a request to the source user authenticator from a user seeking 
access to information protected by the target user authenticator; 
prompting the user for an identification; 
receiving the identification from the user; 

locating the corresponding identification in the target datastore and 
determining whether the target datastore includes a password associated with the 
identification; and 

if the target datastore does include a password associated with the 
identification, then: 

authenticating the identification and password using the target user 
authenticator. 

20. (Withdrawn) The method of claim 19, wherein after determining that target datastore 
does include a password associated with the identification further comprising prompting for and 
receiving from the user the password associated with the identification. 
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21. (Withdrawn) The method of claim 20, wherein the action of prompting for and 
receiving from the user the password associated with the identification comprises prompting for 
and receiving from the user the identification and the password associated with the identification. 

22. (Currently Amended) A method for populating password data to a target datastore of a 
target user authenticator after migration from a source user authenticator having a source 
datastore, while also responding to user requests for information , the method comprising: 

migrating the source user datastore with the source user authenticator to the target 
datastore with the target user authenticator. wherein the target user datastore comprises user 
identification data, and wherein the target user authenticator is in communication with the source 
user authenticator; 

with an int e rceptor: 

interceptin g, with an interceptor, a request to the source user authenticator from a user 
seeking access to information protected by the target user authenticator, wherein the interceptor 
prompts the user for an identification, receives the identification from the user, locates the 
corresponding identification in the target datastore, and determines whether the target datastore 
includes a password associated with the identification; 

prompting th o uoor for an id e ntification, 

receiving th e identification from th e user, and 

locating the corresponding identification in the targ e t datastor e and 
determining whether the targ e t datastor e includ e s a password associated with th e 
id e ntification; and 

if th e target datastor e doos not inolude a password associat e d with th e id e ntification, then: 
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allowing the original intercepted request to go through to the source user authenticator to 
the target user authenticator upon determining that the target datastore does not include a 
password associated with the identification, 

using the source user authenticator to prompt for and receive the identification and a 
password from the user, and with a password capture process , the target user authenticator : 
monitoring monitors the source user authenticator for an approval response, and upon on r e c e ipt 
ef an approval response from the source user authenticator, capturing captures the password 
provided by the user in response to the source authenticator prompting and using the captured 
password as the received password, populates populating the target datastore with the received 
password , and associates associating the received password with the corresponding 
identification. 

23. (Original) The method of claim 22, wherein after populating the target datastore, 
further comprising prompting for and receiving from the user the password associated with the 
identification. 

24. (Original) The method of claim 23, wherein the action of prompting for and 
receiving from the user the password associated with the identification comprises prompting for 
and receiving from the user the identification and the password associated with the identification. 
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